Privacy policy

1.INTRODUCTORY PROVISIONS

1.1. This document constitutes the Privacy Policy of VEGA GROUP s. r. o., ID: 48291757, VAT ID: SK2120129088, Country: Slovakia, City: Bojnice, Post Code: 97201, Address: Svätoplukova 5.

1.2. Our company respects the right to privacy and the protection of personal data. For the purposes of this Privacy Policy, personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

1.3. We always process personal data in accordance with these Personal Data Protection Principles and applicable legislation, such as personal data protection legislation in Slovakia, which is primarily formed by the GDPR Regulation (EU 2016/679), which is directly applicable, and Act No. 18/2018 Coll., which supplements and specifies the GDPR.

 

1.4. Please read this Privacy Policy carefully to understand how we collect, process, and protect personal data when you use Mister Sushi Services, and what rights you have in this context. By using Mister Sushi Services and/or providing us with any personal data, you agree to be bound by this Privacy Policy and warrant that all personal data you provide to us is accurate and that you are authorized to provide such personal data to us.

1.5. For the purposes of this Privacy Policy, and unless the context requires otherwise, we will be regarded as the controller of personal data.

2. CATEGORIES OF PERSONAL DATA

 2.1. We collect, process, and protect the following categories of personal data:
a) Personal details;
b) Email address;
c) First and last name;
d) IP address;
e) Other personal data you share with us.

When using the Mister Sushi Services, we may ask you to provide the above-mentioned personal data, which may be used to contact or identify you. If you provide us with the relevant consent, we may also use the personal data to contact you through newsletters, marketing or promotional materials, and to provide you with other information that may be of interest to you.

Tracking data and cookies.

 We use cookies and similar tracking technologies to process personal data related to the Mister Sushi Services. See Article 6 for more information.

3. PURPOSES OF PERSONAL DATA PROCESSING

3.1. We process personal data for the following purposes:

a) Fulfilment and compliance with our contractual and legal obligations, such as the provision of Mister Sushi Services agreed between you and us – the legal basis for processing is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is party);

b) Direct marketing activities related to the Mister Sushi Services – the legal basis for processing is Article 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller, i.e., carrying out our direct marketing);

c) Detection, prevention, and resolution of technical problems – the legal basis for processing is Article 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller, i.e., preventing errors and correcting them);

d) Improvement of selected Mister Sushi Services – the legal basis for processing is Article 6(1)(a) GDPR (the data subject has given consent to the processing);

e) Conducting analyses related to cookies – the legal basis for processing is Article 6(1)(a) GDPR (the data subject has given consent to the processing);

f) Displaying commercial advertisements related to cookies – the legal basis for processing is Article 6(1)(a) GDPR (the data subject has given consent to the processing).

4. STORAGE AND TRANSFER OF PERSONAL DATA

 4.1. We will store and process personal data only for the period strictly necessary for the purposes specified in this Privacy Policy and only to the extent necessary to fulfil our legal obligations, resolve disputes, exercise our rights, and protect our interests. Personal data will, in particular, be processed for the following periods:
a) Personal data under Article 3.1(a) will be processed for the duration of our contractual and legal obligations;
b) Personal data under Article 3.1(b) will be processed until you object to the processing of personal data for direct marketing purposes (e.g., by refusing to receive newsletters or other marketing communications);
c) Personal data under Article 3.1(c) will be processed for as long as you use the Mister Sushi Services;
d) Personal data under Article 3.1(d) will be processed for the duration of your consent, but no longer than the period during which you use the Mister Sushi Services;
e) Personal data under Article 3.1(e) and (f) will be processed in accordance with the characteristics of the cookies.

4.2. In connection with the provision of Mister Sushi Services, providing the data referred to in Article 3.1(a), (b), and (c) is a contractual requirement. Failure to provide such data prevents us from delivering the Mister Sushi Services. In connection with improving the Mister Sushi Services, conducting analyses, and displaying advertisements, providing the data referred to in Article 3.1(d), (e), and (f) is voluntary. Failure to provide such data will prevent the customization of the Mister Sushi Services to your needs, the performance of analyses, or the display of tailored advertising.

5. DISCLOSURE OF PERSONAL DATA

 5.1. We may disclose personal data to third parties, in particular in connection with:

a) Provision of Mister Sushi Services
Recipients of your personal data are entities that cooperate with us, in particular our subcontractors and suppliers, including companies based outside the European Economic Area (EEA). All data is stored using the Google Cloud service for all our customers, regardless of their location. For more information about Google’s privacy practices, please refer to the Google Privacy Page.

b) Business transactions
We may disclose personal data to any third party that acquires all or a substantial part of our business, shares, or assets, or with which we merge or undergo any other form of corporate restructuring. If we do so, we will inform such third party of the requirement to process personal data in accordance with this Privacy Policy.

c) Disclosure for law enforcement purposes
In certain circumstances, we may be required to disclose personal data by law or in response to a request made by public authorities (e.g., courts or government agencies).

d) Legal requirements
We may disclose personal data if we believe in good faith that such disclosure is necessary to: (i) comply with a legal obligation, (ii) protect and/or defend our rights or property, (iii) prevent or investigate possible unlawful activity in connection with the Mister Sushi Services, (iv) ensure the safety of Mister Sushi Service users or the public, (v) protect against legal liability.

Recipients of personal data may be located outside the EEA. Countries of recipients outside the EEA are, according to the decision of the European Commission, deemed to provide an adequate level of personal data protection in line with EEA standards. In the case of recipients not listed in the European Commission’s decision, we enter into agreements based on standard contractual clauses pursuant to Article 46(2) GDPR. All information relating to personal data protection can be obtained at the Choice office or by sending an email to the address provided in this Privacy Policy.

6. TRACKING, COOKIES, AND IP ADDRESSES

 6.1. Cookies are computer files containing a small amount of data that may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also use beacons, tags, and scripts to collect and track information and to improve and analyze the Mister Sushi Services. Cookies allow us to recognize whether you have returned to our website from the same device, record some of your stored preferences, and verify whether you belong to a particular category of users to whom certain communication should be directed.

7. DIRECT MARKETING

 7.1. (i) By giving the relevant consent to direct marketing when registering as a user of the Mister Sushi Services, or by giving the relevant consent when using the Mister Sushi Services without prior registration, or (ii) by giving the relevant consent when subscribing to marketing communications, surveys, etc., you agree that we may use your electronic contact details to contact you by electronic means (such as email) with marketing information about the Mister Sushi Services.

7.2. You can unsubscribe from marketing communications by disabling this feature via the unsubscribe link included in each email or other communication you receive, or by sending an email request to info@mrsushi.sk, stating that you wish to unsubscribe from receiving marketing communications from our clients.

7.3. You may also give consent to direct marketing to our clients under the terms set out in their respective privacy policies, either (i) by giving the relevant consent to direct marketing when registering as a user of the Mister Sushi Services or by giving the relevant consent when using the Mister Sushi Services without prior registration, or (ii) by giving the relevant consent when subscribing to marketing communications, surveys, etc., in which case you agree that they may use your electronic contact details to contact you by electronic means (e.g., email) with marketing information. However, such consent is entirely governed by their internal privacy policies, and we bear no responsibility for it.

8. SECURITY

 8.1. We are committed to securely storing all personal data. Therefore, we have implemented appropriate physical, technical, and organizational measures and plans to protect and secure personal data (which, however, does not relieve you of your responsibility to take adequate steps to secure your data, especially during data transmission). Our goal is to eliminate any unauthorized or unlawful processing of personal data, as well as any accidental, unauthorized, or unlawful access, use, transmission, processing, copying, transfer, alteration, loss, or damage of personal data.

8.2. If we have provided you with (or you have chosen) a password that enables you to access certain parts of the Mister Sushi Services, you are responsible for ensuring that this password is strong and kept confidential. We ask that you do not share the password with unauthorized persons.

8.3. Unfortunately, the transmission of information over the Internet is never completely secure. While we do our best to protect personal data, we cannot guarantee the security of personal data transmitted by you. Any such transmission is at your own risk, to the extent that we cannot reasonably ensure it. However, once we receive personal data, we apply strict procedures and security measures to protect it and prevent unauthorized access.

8.4. To maintain the highest standards of personal data protection, all information you provide to us is stored on secure servers protected by firewalls. We limit access to personal data to employees, contractors, and agents who need to know such personal data in order to operate, develop, or improve the Mister Sushi Services.

8.5. [Some parts of the Mister Sushi Services that collect personal data also use SSL (Secure Sockets Layer) encryption or other types of encryption. All customer data is backed up in a data center located in Frankfurt (Germany), enabling rapid recovery in the event of a failure or other similar incident, and whenever possible, we ensure pseudonymization or anonymization of all personal or related data (with the exception of names and email addresses).]

9. YOUR RIGHTS

 9.1. In accordance with the rules and conditions set out in the GDPR, you have, or may have, the following rights regarding your personal data:

a) Right of access
You have the right to request confirmation from us as to whether or not personal data concerning you is being processed by our company, and, if so, you may gain access to additional information about such processing.
Your right of access may be exercised in accordance with applicable law. However, if your requests are manifestly unfounded, excessive, or repetitive, we may:

  • charge a reasonable fee considering the administrative costs of taking the requested action; or

  • refuse to act on the request.

b) Right to erasure (right to be forgotten)
You have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase such data without undue delay where all applicable conditions under the GDPR are met. Please note that erasing your personal data may result in our inability to provide you with our services.

c) Right to rectification
You have the right to request that we correct inaccurate or incomplete personal data concerning you without undue delay.

d) Right to object
For reasons relating to your particular situation, you have the right to object at any time to the processing of your personal data.

e) Right to restriction of processing
You have the right to request that we restrict the processing of your personal data.

f) Right to data portability
You have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit such data to another controller without hindrance from us.

g) Right to withdraw consent
If processing is based on consent, you may withdraw your consent at any time. Such withdrawal will not affect the lawfulness of processing based on your consent before its withdrawal.

9.2. If you feel that your personal data has been processed unlawfully, please contact us at info@mrsushi.sk and we will resolve the issue. You have the right to lodge a complaint with the competent supervisory authority. The list of competent supervisory authorities in the European Union is available at https://ec.europa.eu/digital-single-market/en/news/list-personal-data-protection-competent-authorities. In Slovakia, the competent supervisory authority is the Office for the Protection of Personal Data of the Slovak Republic. You can find out more at https://dataprotection.gov.sk/sk/

9.3. Please note that we respond to all inquiries within 30 days. Any requested change, once we have verified your identity and the legitimacy of the request, may take up to five (5) business days to take effect.

10. SURVEYS AND TESTIMONIALS

 10.1. From time to time, we may request information through surveys. Participation in these surveys is voluntary, and you can choose whether or not to participate and disclose the requested information. The requested information may include contact details (such as name and email address) and organizational information (organization name, job title). Contact information will be used to share the results if the participant chooses to receive them. Survey information will be used for research purposes, monitoring, or improving the user experience and satisfaction with the Mister Sushi Services.

10.2. From time to time, we may also publish various texts on our website, such as references, quotes, case studies, white papers, etc., which may contain personal data. Before publishing your name together with such text, we will request your consent. If you wish to update or delete any text containing your personal data, please contact us at info@mrsushi.sk.

11. FINAL PROVISIONS

 11.1. We use a consent management application that makes it easier for you to manage your preferences regarding cookies and other tools. You can use the above-mentioned application to change your cookie settings, including granting and withdrawing consent to the use of optional cookies.

11.2. From time to time, the Mister Sushi Services may contain links to websites of our partner networks, advertisers, and affiliates. If you click on a link to any of these websites, please note that these websites have their own privacy policies, and we do not accept any responsibility for those policies. Please read these policies before submitting any personal data to such websites.

11.3. The Mister Sushi Services are not intended for persons under 18 years of age. To our knowledge, we do not collect personal data from individuals under the age of 18. If you are a parent or legal guardian and are aware that your child has provided us with personal data, please contact us. If we discover that we have collected personal data from children without parental consent verification, we will take steps to delete such information from our servers.

11.4. We reserve the right to change, amend, supplement, or otherwise modify this Privacy Policy at any time and for any reason. Each new version of this Privacy Policy replaces the previous version as of the effective date of the new version.

11.5. If you have any questions regarding this Privacy Policy or our personal data protection practices, please contact us here or by email at info@mrsushi.sk.

This Privacy Policy is valid and effective as of May 1, 2024.